613abb5478352335e8ca42cc9cc7f7db434531f6adcc13128fededa5b840f923 | Triage

Resubmissions

27-07-2021 20:43

210727-p79q663tmn 4

27-07-2021 19:41

210727-ntqg19kake 1

Analysis

max time kernel
149s
max time network
42s
platform
windows7_x64
resource
win7v20210408
submitted
27-07-2021 20:43

Sharing

Report Analysis Logs

General

Target

a6e3c11ca7f024f289d780cf18acee55213c01b131715786605fd4940909f19d.bin.pdf
Size

57KB
MD5

0cb39d7bedba6132c13b1a3b6dee0dd1
SHA1

212b9dc43621c6d3d1836b37038d6edd55a04b1e
SHA256

a6e3c11ca7f024f289d780cf18acee55213c01b131715786605fd4940909f19d
SHA512

cacf72a09dc245dbd4f7f067bb8902e632911b70f6e486242dda430f773bf3bc30c7f7dbc5b1c20c93c5728fc0e3dd690fdccd81fe1a8d47584510301f6e7cab

Score

1^/10

Malware Config

Signatures

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

Processes:

AcroRd32.exe

pid process

660 AcroRd32.exe
Suspicious use of SetWindowsHookEx 3 IoCs

Processes:

AcroRd32.exe

pid process

660 AcroRd32.exe
660 AcroRd32.exe
660 AcroRd32.exe

C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe
"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\a6e3c11ca7f024f289d780cf18acee55213c01b131715786605fd4940909f19d.bin.pdf"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:660

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/660-59-0x0000000075051000-0x0000000075053000-memory.dmp

Filesize
8KB

Download
memory/660-60-0x0000000000D40000-0x0000000000DB6000-memory.dmp

Filesize
472KB

Download